Trustis Limited
CA Chain Installation Guide
Table of Contents
Introduction ... 3
1. CA Certificate Chain Installation With Windows XP And MSIE6 ... 4
2. CA Certificate Chain Installation With Windows Vista And MSIE7 ... 6
3. CA Certificate Chain Installation With Windows 7 And MSIE8 ... 13
Introduction
In the unlikely event that the machine you are using to request your certificate from the Healthcare site does NOT have the appropriate trusted certificates installed, this document details how to install the Certificate Authority (CA) and Root Certificate Authority certificates. These will be needed in order to ensure secure communications over the web when using the service.
The document is in four parts:
1. CA certificate chain installation with Windows XP and Microsoft Internet Explorer 6 (MSIE6)
2. CA certificate chain installation with Windows Vista and Microsoft Internet Explorer 7 (MSIE7)
3. CA certificate chain installation with Windows 7 and Microsoft Internet Explorer 8 (MSIE8)
4. CA certificate chain installation with Firefox
Prior to enrolment or renewal, users should download and install the CA certificate chain as described below according to your Operating System/web browser combination. If you have a different combination of Operating System and browser, go to the section relevant to your Operating System, and then refer to the NOTE part at the beginning of the section which will detail what to do.
1. CA Certificate Chain Installation With Windows XP
And MSIE6
NOTE
The process was captured using Internet Explorer 6. If you are using Internet Explorer 7 or 8, the process is very similar. However, please refer to Section 2 if you are using Internet Explorer 7, or Section 3 if you are using Internet Explorer 8.
If you are using Firefox, please refer to Section 4.
1. Navigate to the URL http://www.trustis.com/pki/healthcare/ops/ to download the CA file healthcarett-chain-der.p7b
2. After Download, right-click the CA file and select Install Certificate.
3. The Certificate Import Wizard appears; press Next. 4. Keep the default option and press Next.
6. Depending on whether you already have the Trustis FPS Root CA installed, you may also see the following message.
7. If you do see this message, click Yes to install the Root Certificate. 8. Click OK
9. Confirm installation of the certificates by opening MSIE6 and selecting Tools -> Internet Options -> Content tab -> Certificates. The CA certificate called Trustis FPS
Root CA should be installed in the Trusted Root Certification Authorities tab, and the
Issuing Authority certificate called Trustis Healthcare TT Issuing Authority should be installed in the Intermediate Certification Authorities tab.
2. CA Certificate Chain Installation With Windows Vista
And MSIE7
NOTE
The process was captured using Internet Explorer 7. If you are using Internet Explorer 8, the process will be very similar.
If you are using Firefox, please refer to Section 4.
1. Navigate to the URL http://www.trustis.com/pki/healthcare/ops/ to download the CA file healthcarett-chain-der.p7b
2. After download, right-click the CA file and select Open. At this point if you have
‘User Account Control’ switched on, you will see the following dialogue box. Click
Continue.
3. The Certificate Manager window appears; expand the folder on the left and click
on the Certificates folder to show the two certificates on the right.
4. Right-click on the Trustis Healthcare TT Issuing Authority and choose Open
6. The Certificate Import Wizard appears. Click Next.
7. Click the option Place all certificates in the following store.
9. Click Next, then Finish. A dialogue box will appear, stating that the import was
successful. Click OK to complete the certificate import process.
10. Close the Certificate window shown in point 5 by clicking OK. Now go back to the
Certificate Manager window to repeat the process for the other certificate. Right-click on the Trustis FPS Root CA. Click Open.
11. The Certificate window appears. Click Install Certificate.
12. The Certificate Import Wizard appears. Click Next.
14. Click Browse, choose Trusted Root Certification Authorities and then click OK
15. Click Next, then Finish. A dialogue box will appear, stating that the import was
successful. Click OK to complete the certificate import process.
16. Close the Certificate window shown in point 5 by clicking OK.
17. Confirm installation of the certificates by opening MSIE7 and selecting Tools -> Internet Options -> Content tab -> Certificates.
The CA certificate called Trustis FPS Root CA should be installed in the Trusted Root Certification Authorities tab, and the Issuing Authority certificate called Trustis
Healthcare TT Issuing Authority should be installed in the Intermediate Certification
3. CA Certificate Chain Installation With Windows 7 And
MSIE8
NOTE
The process is captured using Internet Explorer 8. If you are using Firefox, please refer to Section 4.
1. Navigate to the URL http://www.trustis.com/pki/healthcare/ops/ to download the CA file healthcarett-chain-der.p7b.
2. After download, right-click the CA file and select Open. The Certificate Manager
window appears; expand the folder on the left and click on the Certificates folder to
show the two certificates on the right.
3. Right-click on the Trustis Healthcare TT Issuing Authority certificate and choose
Open.
4. The Certificate window appears. Click Install Certificate.
7. Click Browse, choose Intermediate Certification Authorities and then click OK
8. Click Next, then Finish. A dialogue box will appear, stating that the import was
9. Close the Certificate window shown in point 4 by clicking OK. Now go back to the
Certificate Manager window to repeat the process for the other certificate. Right-click on the Trustis FPS Root CA. Click Open.
11. The Certificate Import Wizard appears. Click Next.
12. Click the option Place all certificates in the following store.
13. Click Browse, choose Trusted Root Certification Authorities and then click OK
14. Click Next, then Finish. A dialogue box will appear, stating that the import was
successful. Click OK to complete the certificate import process.
15. Close the Certificate window shown in point 4 by clicking OK.
Confirm installation of the certificates by opening MSIE7 and selecting Tools -> Internet Options -> Content tab -> Certificates.
The CA certificate called Trustis FPS Root CA should be installed in the Trusted Root Certification Authorities tab, and the Issuing Authority certificate called Trustis
Healthcare TT Issuing Authority should be installed in the Intermediate Certification
4. CA Certificate Chain Installation With Firefox
1. Open Firefox. Click on Tools and choose Options.
2. Click on the Advanced icon, and then click View Certificates
3. Click on the Authorities tab and click Import
4. Find and open the file healthcarett-chain-der.p7b, then tick the boxes Trust this CA to identify web sites and Trust this CA to identify email users. Then click
OK
5. The certificates have been added. Click OK to close the Certificate Manager